How important to you is it that vendors have readily available security compliance documentation when you begin the evaluation process?
Very Important51%
Somewhat Important44%
Not Important4%
218 PARTICIPANTS
2k views1 Comment
Sort by:
Content you might like
What's your experience with SAP ERP on Prem security testing? What kind of engagement did you choose for your SAP landscape—was it a deep-dive technical System Audit, a full-scope Red Team scenario, or something in between? What was the 'why' behind your decision, and what were your key takeaways?
Is your budget for HR technology (such as HRIS, payroll, or talent management systems) managed and paid for primarily by the IT department in your organization?
Yes69%
No31%
Yes - Maine did the right thing. There are too many security risks with free versions of these tools. Not enough copyright or privacy protections of data.29%
No, but.... - You must have good security and privacy policies in place for ChatGPT (and other GenAI apps). My organization has policies and meaningful ways to enforce those policies and procedures for staff.44%
No - Bans simply don't work. Even without policies, this action hurts innovation and sends the wrong message to staff and the world about our organization.19%
I'm not sure. This action by Maine makes me think. Let me get back to you in a few weeks (or months).5%

I find it interesting how important responders say it is compared to how often we all feel we are the first person in the world asking about security compliance from vendors...